Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/nguprZmxS_SHdGAt0v0v6hNgfDQ.mft
File:                     nguprZmxS_SHdGAt0v0v6hNgfDQ.mft (raw, json)
Hash identifier:          41jPNv6b0BI7tMxwNrkzjyGU+VJnTx6zAQey7wNFo6k=
Subject key identifier:   20:FD:DB:C0:7B:3F:18:B2:00:06:80:38:57:24:38:27:E4:4D:1B:62
Authority key identifier: 9E:0B:A9:AD:99:B1:4B:F4:87:74:60:2D:D2:FD:2F:EA:13:60:7C:34
Certificate issuer:       /CN=9e0ba9ad99b14bf48774602dd2fd2fea13607c34
Certificate serial:       0186B960070B4D3812FD6A994F5E8B122688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nguprZmxS_SHdGAt0v0v6hNgfDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/nguprZmxS_SHdGAt0v0v6hNgfDQ.mft
Manifest number:          089B
Signing time:             Tue 07 Mar 2023 00:02:02 +0000
Manifest this update:     Tue 07 Mar 2023 00:02:02 +0000
Manifest next update:     Wed 08 Mar 2023 00:02:02 +0000
Files and hashes:         1: MEa5s9WhLjMUPTKi78IgY5NGXMQ.roa (hash: AjlGqjkcrzFvNyfvDIXPaLOM3/NfuV3g2eAL6UbwEpw=)
                          2: nguprZmxS_SHdGAt0v0v6hNgfDQ.crl (hash: +UztF6mrh5v8snjuXy8FheYMvSkApE3PYk9SPlJOU7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b9:60:07:0b:4d:38:12:fd:6a:99:4f:5e:8b:12:26:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0ba9ad99b14bf48774602dd2fd2fea13607c34
        Validity
            Not Before: Mar  7 00:02:02 2023 GMT
            Not After : Mar  8 00:02:02 2023 GMT
        Subject: CN=20fddbc07b3f18b20006803857243827e44d1b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:9b:17:3a:5a:10:33:30:5d:ef:55:a8:67:
                    30:f1:d7:a8:80:db:d7:8f:7a:90:c5:69:74:df:58:
                    a4:cf:eb:5c:52:e1:bb:7d:a6:da:39:50:a3:be:e3:
                    72:2d:29:0a:ae:59:db:24:eb:a3:9c:71:9d:b3:37:
                    0b:c0:73:2c:cf:85:f5:c6:86:2b:07:5b:4d:9a:58:
                    6c:6e:22:db:b5:d6:3a:ce:81:b7:83:ca:e5:1b:3e:
                    6f:dc:4c:b5:79:60:5c:41:51:8e:56:61:49:14:c6:
                    f1:54:3f:0c:21:56:72:93:87:17:41:b3:70:74:75:
                    cc:d8:a5:49:2c:5c:39:c5:01:ba:d8:7a:24:f1:7a:
                    51:29:fb:b3:c8:33:f3:5c:b6:08:93:5d:fe:59:a3:
                    ab:b2:0a:8c:f9:b0:b3:7d:63:7f:7a:d0:6d:01:a6:
                    de:a3:41:ee:2b:52:ee:46:d5:6c:53:32:39:a6:fa:
                    3a:e4:cf:3a:c5:f2:e4:b5:1b:bf:be:83:61:8f:a8:
                    1a:4b:0a:7a:cd:12:25:ca:c1:be:9d:67:7f:b6:ba:
                    16:76:d2:5a:3a:db:19:e7:19:e2:8f:96:63:01:84:
                    9d:9b:13:98:93:9c:1b:02:9b:c2:c7:3b:76:94:75:
                    3f:5c:8f:02:5a:3b:d2:c9:61:52:78:76:f5:bb:86:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FD:DB:C0:7B:3F:18:B2:00:06:80:38:57:24:38:27:E4:4D:1B:62
            X509v3 Authority Key Identifier:
                keyid:9E:0B:A9:AD:99:B1:4B:F4:87:74:60:2D:D2:FD:2F:EA:13:60:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nguprZmxS_SHdGAt0v0v6hNgfDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/nguprZmxS_SHdGAt0v0v6hNgfDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26387f-a36c-4749-8975-e56b91130eb8/1/nguprZmxS_SHdGAt0v0v6hNgfDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:98:e0:d6:40:9c:52:35:85:89:c1:cc:92:ae:4c:72:b9:c3:
         44:c2:c9:b7:cd:38:ac:c3:98:1a:cc:fd:52:6c:d1:23:3f:3d:
         f1:bc:76:52:3c:27:c5:73:e8:91:cf:5d:bc:3c:5c:f2:0b:dd:
         6a:91:b3:31:4d:a3:10:77:90:2b:aa:7f:d6:b8:aa:54:d3:c8:
         ec:e2:98:f3:9f:c9:b0:03:d2:fe:d5:ca:e2:f5:93:23:72:e7:
         bf:2b:c0:4d:3b:a7:b8:9f:13:85:10:23:2a:63:3a:e8:cf:b9:
         04:ea:6d:60:0d:fe:22:ef:fe:34:cc:23:ca:6e:9c:a7:06:a7:
         16:24:71:ad:5c:d9:4d:f3:39:f5:c7:ed:5d:6c:a9:0c:08:49:
         c3:f4:49:7e:66:67:bf:5a:58:c4:24:ea:03:71:a1:89:41:58:
         95:a2:cd:93:6f:4f:de:47:05:a6:c5:96:8a:ef:6f:1e:03:db:
         ee:5c:c0:7a:af:af:21:76:22:d6:43:66:50:d9:ba:1a:66:dc:
         57:44:3b:5e:42:13:9e:e2:44:cb:3a:d2:c6:5d:10:89:16:6f:
         68:32:9d:67:2d:d6:62:0f:8f:6d:f6:8a:98:29:22:8b:18:46:
         04:43:14:23:02:d3:52:b7:b1:82:54:83:cf:01:ed:7b:a8:3a:
         d2:2f:2d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----